Both words mean bad, and are pretty much synonymous, but malevolent may have more of a feeling of potential evil smoldering within a person, while malicious could used to describe actual evil that has been demonstrated. Example:

I knew he was a malevolent S.O.B.,
but I never dreamed he would
perform such a malicious act.